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WHAT IS CLAIMED IS: 



V 




4 

5. 



:tijc 



1. A method for inserting/a digital signature into 
digital data, the digital data comp:;/ising bits, the method 
comprising the steps of: 

assigning predetermined bits of the digital data 
for receiving the digital signature; 



6 signing the/dig.ital| data excluding the 

7 - predetermined bits resul/ting in tWe digital signature; and 

8 inserting the digittal signature into the 

9 predetermined ^its >of the digital/ data for subsequent 
10 authentication of/the digital datja. 

1 2. The method of cla|m 1/ wherein the signing step 

2 comprises :. 

3 . . applying a ohe-wa(y hashing function to the digital 

4 data excluding said predetermined bits resulting in a hash; and 

5 encrypting the hash. 

1 ^ 3. The method of claim 1, . wherein the digital data is 

2 selected from a group consist ifig of image data, video data/ and 

3 audio data . 



1 4. The method of Iclaim y, further comprising the step 

2 of inserting associated data /into ^me digital data prior to the 

3 signing step such that the digital signature authenticates both 

4 the associated data as well as the digital data. 
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The method, of c 



.aim wherein the associated data 



is inserted into the bits of tie digital data excluding the 
predetermined bits. 



6 . , The method of c 
comprises a plurality of sampl^ 
defined by a plurality of the 
to a least significant bit, a 



laim^, wherein the digital data 
es, each of the samples being 
bits, from a most significant bit 
LI of the least significant bits 



bit plane, wherein the predet 



portion of the least significant bit plane 



defining the plurality of . samples comprising a least significant 



ermined bits comprise at least a 



7 . The method of 
an image and each sample is 



8. The method of 
video and each sample is a 



claim 6,. wherein the digital data is 
an image pixel. 



claim 6, wherein the digital data is 
sipatial temporal sample. 



9. The method ofi claim 6, wherein the digital data is 
audio and each sample is a t:ime sample. . ' 

10 . . The method o:: claim 6, wherein the associated data 
is insert ed . into at least a portion of the remaining least 
significant bits in the least significant bit plane. - 

11. The method of claim wherein the' digital data 
comprises a plurality of samples, ea.ch of the samples being - 
defined by a plurality of the bits, .further comprising the step 
of transforming the plural:. ty of bits into an alternative 
representation having at Ifsast first and second characteristic 
components, wherein the predetermined bits comprise the first 
characteristic component . 
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12. The 
is an image and each s 
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methdd of claim 11, wherein the digital data 
aidple is an image pixel. 



13. The method of claim 11, wherein the digital data 



is video arid each sample 

14 . The methoji 
is audio and each sample 

15 . The methoc^ 
data is inserted into at 
characteristic component^ 



is a spatial temporal sample. 

of claim 11, wherein the digital data 
is a time sample. 

of claim 11, wherein the associated 
east a portion of the second 



16. The method 
representation is a frequ 



of claim 15, wherein the alternative 
incy, domain representation having high 



and low frequency componeits, wherein the first characteristic 
component is a portion of the high frequency component and the 
second characteristic com])onent is the remaining high frequency 
component and the low frequency component. 



17 



The method 



/. 

of claim 4, wherein at least a portion 
/ 



of the associated data compris'es dat^ identifying a public key 



needed to decrypt the digi 

18. The method 
comprises data identifying 

19 . The method 
comprises data identifying 
digital data. 



/ . 

tad signature. 
L 

of claim .4, wherein the associated data 
a source, of the digital data. 



of claim 4, wherein the associated data 

4 ' 

the identity of an owner of the 
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20. The metihod of claim 19, wherein the digital data 
is an image and the asbociated data comprises data identifying a 
photographer of the image. 

■ \ I 

21. The metHod of claim^/, wherein a portion of the 

associated data is encrypted and a remaining portion of the 
associated data is unencrypted. 



/: 



22. The method of claim wherein the associated data 



comprises at least two fields 



23 . The me 
the fields comprises datla 
decrypt the digital signktU'f 



:la'im 



thc|d of c^dm 22, wherein at least one of 
identifying a public key needed to 
e. 



24. The method of claim 23, wherein at least one other 



field comprises data idei 



tifying the owner of the public key, 



25 . The method 
of receiving the associate 



26 . The method 
source is a Global Positi 



27, The method 
compressed using a compre 
compressed file, wherein 
of: 



of clalm-^;^, further comprising the step 
data from an external source. 



of claim.-2'5, wherein the external 
ining-^Satellite transmission. 



of claim 1, wherein the digital data is 
^sion standard resulting in a 
the method further comprises the steps 



. creating a 
step; signing the decompre^ 
signature; and 



decompressed file prior to the signing 
sed file resulting in the digital 
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insertilng the digital signature into a header in 
the compressed file inptead of inserting the same into the 
digital data. 

28. The metjiod of claim 27, wherein the digital data 
is an image and the compression standard is JPEG, 



29. The met 
is video and the compr 



lod of claim 21, wherein the. digital data 
Bssion standard is MPEG. 



comores 



3 0. The me 
compressed using a 
compressed file, where[L 
of: 



t lod 



I, 



of claim wherein the digital data is 
sion standard resulting in a 
in the method further comprises the steps 



creatin(j a decompressed file prior to the signing 



step; 



insertir 
decompressed file; 



g the associated data into the 



signing phe decompressed file resulting in the 
digital signature; and 



inserting the digital signature and associated- 
data into a header in the compressed file instead of inserting 
the same into the digital data. 

31. The method of claim 30, wherein the digital data 
is an image and the compression standard is JPEG. 



32 , The method 
is video and the compres 



of claim 30, wherein the digital data 
ion standard is MPEG. 
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33. The method of claim 



comprises a plurality 
defined by a plurality 
to a least significant, 
defining the plurality 
bit plane, wherein the 



digital data; 



conca 
data having the i 
signing step; 



gnorel 



wherein the digital data 



of samples, each of the samples being 
of the bits, from a most significant bit 
bit, all of the least significant bits 
of samples comprising a least significant 
method further comprises the steps of: 



ignoring the least significant bit plane in the 



tetnating the associated data to the digital' 
least significant bit plane prior to the 



performing the signing step to the digital data 
having concatenated associated data resulting in the digital 
signature; 



wherein I the predetermined bits comprise at least a 
portion of the least silgnificant bit plane and the associated 
data is inserted into at least a portion of the remaining least 
significant bits in- the least significant bit plane. 



34. The method of claim 1, further comprising the 



steps of; 



providing! time data identifying the time the 
digital data was created] 

concatenading the hash and the time data; 



applying al one-way hashing function to the 
concatenated hash and time data resulting in a second hash; and 
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encrypting the second hash instead of the first 
hash to result in a tjime stamp containing the digital signature, 
wherein both the digijpal data and the time data are subsequently 
authenticated. 



steps of : 



35. The metlhod of claim 34, further comprising the 



3 . - transmitting the hash and signature to a third 

4 party for performance pf the providing, concatenating, and 

5 encrypting steps; and 

6 receiviiig the time stamp from the third party 

7 . prior to the inserting step. 



1 

2 
3 

1 
2 
3 
4 
5 

1 
2 

3 
4 
5 



36 . . The metltiod 
party resides at an i 
receiving steps are dor 



int.ernet 



of claim 35, wherein the trusted third 
address and the transmitting and 
e through the internet. 



37. The methlod of claim 34, wherein the time stamp is 
ptor chip having a tamper resistant clock 
-ime stamping circuit, wherein the clock 
outputs the time data wiich together with the digital signature - 
is signed by the circuil: to output the time stamp. 



provided by a semicondu 
and a tamper resistant 



y 6 ' 

38. The method of claim 4f, further comprising the 



steps of 



storing an identifier in a memory corresponding to 
each of at least one usejr of a device which creates . the digital 
data; 



recognizing a user 
the memory; and 
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of the device whose identifier is stored in 



outputting the identifier corresponding to the 
recognized user from the memory to be inserted as the associated 
data. 

39. The method of claim 38, further comprising the 
steps of storing a jrivate key for signing the digital data in 
the memory corresponding to each user and using the private key 
for signing the digital data. 



40. . The mfe 
step is accomplished 



thod of claim 38, wherein the recognizing 
by a fingerprint recognition system. 



41. The 
a name of the recogn:. 



method of claim 38, wherein, the identifier is 
zed user. 



42. A method for au then ti/ca ting digital data having an 
embedded digital sigrc 

data, the method comprising the st'eps of 



ature in predetermined bits of the digital 



extrac 
predetermined bits; 

decryp 

data resulting in a f 



:i/:ati: 



ting, the digital signature from the 



:ing the/ digital signature from the digital 



:.rst hash; 



applying a one-way hashing function used by an 



encoder of the digital 



da/a to the digital data excluding the 



predetermined bits resul/ting in a second hash; and 



V 
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comparing 
wherein if the first ha 
data is authentic. 
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the first hash t<5 the second hash 
3h matches the second hash the digital 



44 . The me 
further comprises assoc 
digital data, wherein 
associated data as wel 



43. The method of claim 42/ wherein the digital data 
is selected from a grou^ consisting o4 image data, video data, 
and audio data, 



th(j>d of claim/42, wherein the digital data 
;.ated data /inserted into known bits of the 
tHe method /authenticates both the 
as the digital data. 



. 45 . The method 
data is inserted into tflie 
predetermined bits. 



the method further comp4 

. / 

/ 

decompres 



respectively, pri^or to 



of claim 44, wherein the associated 

. / 

bits of the digital data excluding the 



46. The methcbd of claim 44, wherein the digital data 
is compressed using a comp^ression standard resulting in a 
compressed file and wheie 
data are contained in a 



/. 



in the digital signature and associated 
header in the compressed file, wherein 
ises the steps of: 



sing the compressed file; and 



the signature and associated data from 



replacing 

the header into the predetermined bits and the known bits, 



le extracting step. 




47. An encoder for inserting a digital signature into 
figital data, the digital data/comprising bits, the encoder 
*eemprl-S'rng-: — 
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means for a 
digital data for receiving 



means for s 
predetermined bits result 
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signing Redetermined bits of the 
the digi/tal signature; 



gning/the digital data excluding the 
in/ the digital signature; and 



iiLg 



means for inserting the digital signature into the 



predetermined bits of the fiigital data for subsequent 



igiy^"; 



authentication of the dig 

48 . The encoder 
signing comprises: 



al data. 



of claim 47, wherein the means for 



means for applying a one-way hashing function to 



the digital data excluding 
hash; and 



said predetermined bits resulting in a 



encrypting the hash. 

49. The encodeir of claim 47, wherein the digital data 
is selected from a group consisting of image data, video data, 
and audio data. 



5 0 . The encod 
for inserting associated 
signing the digital data 



data is inserted into tlr 
predetermined bits. 



5r of clainf 47, further comprising means 
data into the digital data prior to . 
such that the encoder authenticates both 
J t 



the associated data as well the digital data. 

47 



51. The encoder of claim^^*^ wherein the associated 



e bits of the digital data excluding the 



52. The encoder of claim. ^-Qf, wherein the digital data 
comprises a plurality of samples, each of the samples being 
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defining the plurali 
bit plane, wherein t 



defined by a plurality of the bits, from a most significant bit 
to a least signif icaat bit, all of the least significant bits 

:y of samples comprising a least significant 
le predetermined bits comprise at least a 



portion of the least ^significant bit plane, 



53. The 
is an image and each 



encoder 



of claim 52, wherein the digital data 
sample is an image pixel. 



54. The 
is video and each samp 



55. The 
is audio arid each s 



encoder 



of claim 52, wherein the digital data 
le is a spatial temporal sample. 



encoder 



ampl 



of claim 52, wherein the digital data 
e is a time sample. 



55 



The encfcoder of claim 52, wherein the associated 



data is inserted into 



at least a portion of the remaining least 



significant bits in the least significant bit plane, 



IS an image comprising 
samples being defined 



57. The enqoder of claim wherein the digital data 

A 



a plurality of samples, each of the 
Dy a plurality of the bits, further 
comprising means for transforming the plurality of bits into an 
alternative representai:ion having at least first and second 
characteristic components , wherein the predetermined bits 
comprise the first chai'acteristic component. 

58. The encoder of claim 57, wherein the digital data 
is an image and each sample is an image pixel. 



59 . The enco 
is video and each sampl 



ier of claim 57, wherein the digital data 
s is a spatial temporal sample. 
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60. The encoder of claim 57, wherein the digital data 
is audio and each sample is a time sample. 



data is inserted into a 
component. 



61. The encoder of claim 57, wherein the associated 



t least a portion of second characteristic 



62.. The encoder of claim 61, wherein the alternative 
representation is a freciuency domain representation having high 
and low frequency components, wherein the first characteristic 
component is a portion of the high frequency component and the 
second characteristic component is the remaining high frequency 
component and the low f]|:equency component, 

63. The encoc&er of claim 50, wherein at least a 
portion of the associattid data^comprises data identifying a 
public key needed to decrypt the digital signature. 



64 . The encoder of claim wherein the associated 
data comprises data identifying a source of the digital data.. 



65 




is an image and the asi 



/ 



The encoder of^eiaim wherein the associated 



data comprises data^.de{rLtif ying the identity of an owner of the 
-dxgl'raTr-da-t^r;^ 



66.. The enccder of claim 65, wherein the digital data 



pciated data comprises data identifying a 



photographer of th^image. 

67. The encpder of claim^^^, wherein a portion of the 
associated data is encrypted and a remaining portion of the 
associated data is unencrypted. 



I 



68. The encod 
data comprises at least 



2r of claim wherein the associated 
wo fields. 



69 . The encoder 
the fields comprises data 
decrypt the digital sig'natur 
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^7 



of^^l-alm 68, wherein at least one of 
identifying a public key needed to 
e. 



70. The encoder of claim-'6'9, wherein at least one 
other field compr-ises' data identifying the owner of the public 



key. 



71 . The encod4r 
for receiving the associ 



72. The 
source is a Global Posi 



of claim further comprising means 

ited data ^fxom an external source. 



encoder 



.of claim 71, wherein the external 
Coning Satellite transmission. 



73. The encod 
is compressed using a 
compressed file, wherein 



sr of claim 47, wherein the digital data 
cofapression standard resulting in a 
the encoder further comprises: 



means for 
signing the digital data 

means for 
in the digital . signature 

means for 
header in the compressed 
the digital data. 



creating a decompressed file prior to 



signing the decompressed file resulting 
; and 

inserting the digital signature into a 
file instead of inserting the same into 



74. The encoder of claim 73, wherein the digital data 
is an image and the compression standard is JPEG. 
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75. The encoder of claim 73, wherein the digital data 
is video and the compression standard is MPEG. 

76. The encoder of claim. wherein the digital data 
1 ^ . 

is compressed using a compression standard resulting in a 



compressed file, wherein 

means for 
signing the digital data 

means for 
decompressed file; 



the encoder further comprises: 



creating a decompressed file prior to 



inserting the associated data into the 



means for signing the decompressed file with the 
associated data inserted t:herein resulting in the digital 
signature; and 



means for 
associated data into a. 
inserting the same into th 



ans 



77 . The encoder 
is an image and the comprei 



erting the digital signature and 
in the compressed file instead of 
5 digital data . 



header 



of claim 75, wherein the digital data 
sion standard is JPEG. 

of claim 75, wherein the digital data 



78. The encoder 
is video and the compressidn standard is MPEG. 

¥7 



to a least significant bit, 
defining the plurality of s 



bit plane, wherein the encoder further comprises: 



of claim^>0^, wherein the digital data 



79 . The encoder 
comprises a plurality of sajmples, each of the samples being 
defined by a plurality of tjhe bits, from a most significant bit 

all of the least significant bits 
Samples comprising a least significant 
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means tor ignoring at least a portion of the least 



significant bit plane 
means 

digital data having t 
to signing the digita 



means 

concatenated associal 



in the digital data; 

or concatenating the associated data to the 
le ignored least significant bit plane prior 

da tai- 
lor signing the digital data having the 
t^d data resulting in the digital signature; 



where 

portion of the least 
data is inserted into 
significant bits in t 



iifi the predetermined bits comprise at least a 
ignificant bit plane and the associated 
at least a portion of the remaining least 
le least significant bit plane. 



means 

the digital data was 



means 



data; 



means 

the concatenated hash 
and 



80. The encoder of claim 



im ^] 



further comprising: 



::or providing time data identifying the time 
created; . 

or concatenating the hash and the time 



or applying a one-way hashing function to 
and time data resulting in a second hash; 



means 

the first hash to re 
signature, wherein 
subsequently authent 



for encrypting the second hash instead of 
ult in a time stamp containing the digital 
bcith the digital data and the time data are 
cated. 
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81. The encoder of claim 80, further comprising: 



means f 

for providing the time 
stamp; and 

means f 

party prior to encrypt 



or 



party resides at an in 
transmitting and recei 
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transmitting the hash . to a third party 
stamp and concatenating the hash and time 



o:: receiving the second hash from the third 
ion. 



82. The encoder of claim 81, wherein the trusted third 



teirnet address and the means for 
:.ng is a computer capable of accessing the 



internet and receiving the transmitted second hash. 



encoder 



83. The 
semiconductor chip- havir^g 
resistant time stamping 
time data which together 
the circuit to output 



the 



84 



The encodler of claim^>ff, further comprising 



a memory 
to each of at least one 
digital data; 



recognition 
device whose identifier 



output me^ns 
corresponding to the recbgn 
inserted as the associated 



of claim 80, further comprising a 
a tamper resistant clock and a tamper 
circuit, wherein the clock outputs the 
with the digital signature is signed by 
time stamp. 

V7 



for storing an identifier corresponding 
aser of a device which creates the 



means for recognizing a user of the 
Ls stored in the memory; and 



for outputting the identifier 
ized user from the memory to be 
data. 



V 



85. The encoder of claim 84, wherein a private key for 
signing the digital data is also stored in memory corresponding 
to each user, wherein! the identifier is inserted as associated 
data and the private wey is used to sign the digital data. 



86. The 
means is a fingerprint 



encoder of claim 84, wherein the recognition 
recognition system, . 



87. The 
a name of the recogniz 



encoder 



of claim 86, wherein the identifier is 
4d user. 



88. A decoder 
an embedded digital si 
digital data, the 



decoder 



for authenticating digital data having 
^nature in predetermined bits of the, 
comprising/: 



means for extracting the digital signature from 



/ 



/ 



or decrypting the signature from the 
in a first hash; 



the predetermined bits 
means f 

digital data resulting 

means for applying a one-way hashing function to 
the digital data exclulding the predetermined bits resulting in a 
second hash; and 

means for comparing the first hash to the second 
hash wherein if the first hash matches the second hash the 
digital data is authentic. 



89. The decoder of claim 88, wherein the digital data 
is selected from a group consisting of image data, video data, 
and audio data. 
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1 90. The decoder of claim 88, whe/ein the digital data 

2 further comprises associated data inserted^ into known bits of the 

3 digital data wherein the decoder authent:^ates both the 

4 associated data as well as the digital data. 

1 91. The decoder of claim 90,7 wherein the associated 

2 data is inserted into the bits of the /digital data excluding the 

3 predetermined bits. 

1 92. The decoder of claim/90, wherein the digital data 

2 is compressed using a compression standard resulting in a 

3 . • compressed file and wherein the digital signature is contained in 

4 a header in the compressed f ile, /^herein the decoder further - 

5 comprises : . j ' 

6 means for deccxnpressing the compressed file; and 

7 means for replacing the signature from the header 

8 into the predetermined bits^ prior to extracting the digital 

9 signature from the predetermined bits. . 

1 93. The deco^i^ of claim 90, wherein the digital data 

2 is compressed using a^ c^ompression standard resulting in a 

3 compressed file and wherein the digital signature and associated 

4 data are contained iny'a header in the compressed file, wherein 

5 the decoder f urther , comprises : . 

/ 

6 means for decompressing the compressed file; and 

7 me^ns for replacing the signature and associated 

8 data from the header into the predetermined bits and the known 

9 bits, respectively, prior to extracting the digital signature 
10 from the predetermined bits. 
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1 94. A method for inserting dataf into digital data for 

2 subsequent authentication of the digital /data, the method 

3 comprising the steps of: / 

4 receiving data from an External source; 

5 inserting the data intb the digital data; and 

6 authenticating the digital data. 

1 95. . The method of claim^4, wherein the external 

2 source is a radio frequency transmission. 

1 .96. The method of. cla^ 94, wherein the external 

2 source is an internet . link . / 

1 97. The method of /claim 94, wherein the inserted data 

2 is used for authenticating information associated with the 

3 digital data. /" 

■ / 

1 98. A device for inserting data into a digital data 

2 for subsequent authentication of the digital data,^ the device 

3 comprising: I 

4 means £Qr receiving data from an external source; 

5 means /for inserting the data into the digital 

6 image; and / 

7 means for authenticating the digital data. 

1 99. The device of claim 98, wherein the external 

2 source is a radi^o frequency transmission and the means for 

3 receiving the data comprises an antenna. 
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1 100. The device of claim 98, wherein the external 

2 source is an internet link and the means^or receiving the data 

3 comprises a computer capable of accessing the internet and 

4 receiving the data. / 

1 101. The device of claim SB! wherein the inserted data 

2 is used for authenticating informatiod associated with the 

3 digital data. / 

1 102. The device of claim/9 8, wherein the device is a 

2 digital image generation device and the digital data represents 

3 an image. ^ 

1 . 103. The device of cl^aim 102, wherein the image 

2 generation device is selected from a group consisting of a 

3 digital camera, a digital video camera, and a digital scanner. 

1 104. A method for inserting time data into digital data 

2 for subsequent authentication of both- the time data and the 

f 

3 digital data, the method comprising the steps of: 

4 providing /a semiconductor chip having a tamper 

5 resistant clock and a time stamping circuit; 

6 outputti/ng the digital signature and time data 

7 from the clock to the^ime stamping circuit; 

8 signing the time data and the digital signature 

9 resulting in a time ^tamp; and 

10 authenticating the digital data and the time data. 

7 
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1 105. A device for inserting time/data into digital data 

2 for subsequent authentication of both th^ time data and the 

3 digital data, the device comprising; 

4 a semiconductor chip haiving a tamper resistant 

5 clock and a tamper resistant stamping/ circuit ; 

7 

6 means for outputting/ the digital signature and 

7 time data from the clock to the time stamping circuit; and 

■ "■ / 

8 means for signing the time data and the digital 

/ 

.9 signature resulting m a time stamp. 

1 106. The device of/ claim 105, wherein the device is a 

2 digital image generation device and the digital data represents 

/ 

3 an image. 

1 107. The devi<2e of claim 106, wherein the image 

2 generation device is sielected from a group consisting of a 

3 digital camera/ a distal video camera, and a digital scanner. 




1 ^^/^ 108, A method for inserting data into digital data, the 

2 . device comprising: 

3 storing an identi-^ier corresponding to each of at 

4 least. one user of a device which creates the digital data; 

5 recognizing a user of the device whose identifier 

6 is stored in the memory; 

1 outputting the identifier corresponding to the 

// 

8 recognized user from fche memory; and 




9 
10 

1 
2 
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1 
2 

1 
2 
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■data corresponding to the identifier 



inserting, 
into the digitaJ^^^ta . 

109. The method of claim. 108, wherein the inserted data 
is used for authenticating the digital data, 



1" 



110. The method 
is used for authenticatin 
digital data . 

111. The method 
a name of the recognized 

112. A device f 
device comprising: 



of claim 108, wherein the inserted data 
J information associated with the 



of claim 108, wherein the identifier is 
User. 

Dr inserting data into digital data, the 



a memory f 
to each of at least one 



or storing an identifier corresponding 
of the device; 



user 



recogniti 
device whose identifier i 



means for 
to the recognized user fr0m 



means for 
identifier into the digii 



113 . The device 
signing the digital data 
to each user, wherein the 
data and the private key 
data. 



ofL means for recognizing a user of the 
13 stored in the memory; 



outputting the identifier corresponding 
the memory; and 



inserting data corresponding to the 
data. 



tal 



of claim 112, wherein a private key for 
is also stored in memory corresponding 
identifier is inserted into the digital 
s used to subsequently sign the digital 



1 

2 

1 
2 
3 

1 
2 
3 



114. The dev 
means is a fingerprint 

115. The dev;. 
digital image generati 
an image . ' 
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ce of claim 112, wherein the recognition 
recognition means. 



ce of claim 112, wherein the device is a 
On device and the digital data represents 



device 



116. The 
generation device is se 
digital camera, a digi 



of claim 112, wherein the image 
lected from a group consisting of a 
tkl video camera, and a digital scanner. 




